API keys

Reading the API needs no key: 60 requests a minute per address. A free key raises that to 600 a minute, is required for submitting reports from code, and gives us a way to tell you about changes. Keys are free; the terms rule out commercial use without a commercial key.

Send it as: X-API-Key: para_… (or Authorization: Bearer para_…)
Check it: GET /api/v1/ echoes authenticated_as; every response carries X-RateLimit-Limit and X-RateLimit-Remaining
Submitting: POST /api/v1/reports with the key and terms_accepted: true; see the reference